[Openid-specs-ab] Simplifying preferred_locales and max_age

Brian Campbell bcampbell at pingidentity.com
Fri Feb 1 18:39:00 UTC 2013


I'm okay with it.


On Fri, Feb 1, 2013 at 11:21 AM, Justin Richer <jricher at mitre.org> wrote:

>  While I'm hesitant to add more specialized parameters to the auth
> endpoint, I can see the logic here. Thus, at first instinct, I could take
> it or leave it.
>
>  -- Justin
>
>
>
> On 02/01/2013 01:15 PM, Mike Jones wrote:
>
>  Currently “preferred_locales” and “max_age” are specified as occurring
> under the “userinfo” and “id_token” elements of the request object.  I
> would propose moving them up to being top-level elements of the request
> object, and possibly also allowing them to be used directly as request
> parameters.  My reasoning is that it makes no practical sense to use
> different locales for UserInfo claim values versus ID Token claim values.
> Likewise, while “max_age” does apply logically to the ID Token, it would
> cause no confusion to have it apply to the whole request and it could be
> useful to allow specifying “max_age” as a query parameter.****
>
> ** **
>
> One consequence of allowing “preferred_locales” to also be specified as a
> query parameter is that its syntax would change from a JSON array to a
> space-separated list of strings.****
>
> ** **
>
> If we did this change, it would both simplify the parsing for the MTI
> Fallback Position described in my previous message (one would just ignore
> “userinfo” and “id_token” rather than ignoring the “claims” members of
> “userinfo” and “id_token”) and would enable more important functionality to
> be used without using the request object, which I think would make many
> developers happy.****
>
> ** **
>
> Thoughts?****
>
> ** **
>
>                                                             -- Mike****
>
> ****
>
>
> _______________________________________________
> Openid-specs-ab mailing listOpenid-specs-ab at lists.openid.nethttp://lists.openid.net/mailman/listinfo/openid-specs-ab
>
>
>
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-ab
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20130201/090c8e34/attachment.html>


More information about the Openid-specs-ab mailing list